hectorm
- https://web.archive.org/web/20260605175351/https://github.co...
- https://web.archive.org/web/20260605175320/https://github.co...
- https://web.archive.org/web/20260605175256/https://github.co...
Show HN: Cardea, SSH bastion with per-key ACLs, TPM keys and session recording
https://github.com/hectorm/cardea
Author here. Cardea is an SSH bastion I wrote to manage access to some servers I administer. Access policies are defined in a single text file, similar to OpenSSH's authorized_keys format, with macros, server groups, time windows, and key expiry, so everything is reviewable in PRs and deployable with config management. No database, no web UI.Clients connect with any standard SSH client encoding...
Show HN: Cardea, SSH bastion with per-key ACLs, TPM keys and session recording
https://github.com/hectorm/cardea
Author here. Cardea is an SSH bastion I wrote to manage access to some servers I administer. Access policies are defined in a single text file, similar to OpenSSH's authorized_keys format, with macros, server groups, time windows, and key expiry, so everything is reviewable in PRs and deployable with config management. No database, no web UI.Clients connect with any standard SSH client encoding...
Basically it is a proxy that alters HTTPS traffic to prevent DPI systems from detecting the domain during the TLS handshake. At least in Spain it works for me to bypass the blocking of the major ISPs [2].
It's just a proof of concept but some people are using it for CI as well [2].
[1] https://github.com/hectorm/docker-qemu-haiku
[2] https://github.com/HaikuArchives/ArtPaint/blob/7f5c49278545e...
https://status.docker.com/pages/incident/533c6539221ae15e3f0...
Docker Hub Registry is down
So yes, technically it's backdoored but only for yourself :)
I've done my best to confirm the legitimacy but if anyone has an original CD it would be awesome if they could confirm it.
Regarding legality, I hope that Microsoft doesn't claim any rights, since the Windows 2000 image has been published in WinWorld for years without issues.
Show HN: Windows 2000 on Docker
AdoptOpenJDK to join the Eclipse Foundation
In the case that no automatic deployment is necessary, it may also be useful to look directly at the WireGuard configuration [2]. Since WireGuard supports scripts in "PostUp" and "PostDown", I have automated the configuration of iptables, including some useful rules to redirect 53/UDP port traffic from the public interface to WireGuard, which helps in some cases to bypass some firewalls.
[1]: https://github.com/hectorm/wireguard-setup
[2]: https://github.com/hectorm/wireguard-setup/blob/master/packe...
[1] https://github.com/hectorm/hblock-resolver/blob/master/Makef...
To block ads when I'm not at home, I use WireGuard and pass DNS traffic through it.